To secure a resource within the application, enter the path to the
resource, for example: /MyServlet.jsp

To secure the entire contents of a Web application contained in an
EAR, enter a single slash: /

Caution:

In WebLogic Server version 8.x the two characters /
* were used by the security container to indicate the entire
Web application contents. In versions later than 8.x, BEA recommends
that you use the / character, as it is the standard
J2EE syntax used by the Servlet container. If you want to continue
using /* you need to disable the
EnforceStrictURLPattern field.